88856b2150e2ace395a907835a00a145b191d64386fecf41f62a02ad61d2ddb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88856b2150e2ace395a907835a00a145b191d64386fecf41f62a02ad61d2ddb8
Size

9KB
MD5

ad868d9fdd1ecc0d3687ade66cdc96e3
SHA1

49966d6c921030720b175ff5d1f391075427a6f4
SHA256

88856b2150e2ace395a907835a00a145b191d64386fecf41f62a02ad61d2ddb8
SHA512

f1e7da6d6a3f35eb8ebb9dcdaecbfd231d307987b7231e53b828b5ed1ed69338d37cccb65b38f29ad9c964de51f28deb81d8c9e11f258d79e4819f77b1d07b9b
SSDEEP

96:gmI/4G9o6zP/jGkddXRwMWAPn3MkeEtQIcNXetFkviaDXKTipXhkDo1nWwZQxy+0:gmI4G9o6vGkvdBec7M3nvEvgQc9

Score

N/A

Malware Config

Signatures

Files

88856b2150e2ace395a907835a00a145b191d64386fecf41f62a02ad61d2ddb8
.dll windows x86

5255361dd6daca829edc8cc840941ccb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
DeviceIoControl
FreeLibrary
GlobalFree
LoadLibraryExA
GlobalAlloc
GetProcAddress
MultiByteToWideChar
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
Module32Next
Module32First
OpenProcess
GetCurrentProcess
LoadLibraryA
GetModuleFileNameA
CloseHandle
lstrcpyA
lstrcatA
lstrlenA

advapi32

OpenServiceA
CloseServiceHandle
ChangeServiceConfigA
DeleteService
OpenSCManagerA

Exports

Exports

testall

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ